Vulnerability Bulletins

CVE-2026-120467

   
Affected software JOOMLA
 
Joomla / WordPress Extension - acymailing.com - Subscriber identity not bound to the record acted upon in AcyMailing 1.0.0 - 11.1.1 - An authenticated user of any privilege level can subscribe or unsubscribe any other subscriber to or from any mailing list of the site.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-120467